Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
File: nVXDPIsCBMRAwPl46lhSCAHixcc.mft (raw, json)
Hash identifier: P4s4DtLvJLfm8NE2DgP6oi9YHsKbpgp7OgiW0Sg2C7A=
Subject key identifier: 62:68:80:06:91:FF:72:FF:E3:E8:92:50:C8:AE:90:C6:A1:13:72:9A
Authority key identifier: 9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7
Certificate issuer: /CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7
Certificate serial: 019D273A9C90C94DA2D8CFF223ECA3144FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
Manifest number: 012B
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: nVXDPIsCBMRAwPl46lhSCAHixcc.crl (hash: HeLX36LGaDFpPAMtdskQBRFLV2vTF+CpHTvXLLe5Ijc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9c:90:c9:4d:a2:d8:cf:f2:23:ec:a3:14:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=6268800691ff72ffe3e89250c8ae90c6a113729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:18:48:7c:ad:8b:69:dc:d3:9d:a4:d9:44:
34:8e:0e:de:38:58:15:5c:18:3d:c1:6e:48:d1:3c:
f8:18:f8:0d:27:ec:d5:1e:3b:e9:e6:de:3b:af:f5:
4a:8f:dd:08:96:f8:31:8e:8c:90:ab:2e:bc:68:a6:
52:fc:ae:34:6e:38:6d:fe:7b:a6:c6:8b:28:55:05:
a4:01:11:64:fa:35:64:21:14:14:85:f3:58:ad:2e:
b1:20:7a:ee:36:53:03:d7:0c:d6:44:52:df:0b:76:
71:e7:cc:38:fc:66:47:d7:30:f6:31:7e:f5:1b:81:
7a:f2:09:9d:bb:d1:69:dc:26:11:6d:1b:38:d0:eb:
3b:85:db:47:6b:6d:88:1f:10:5b:de:d7:06:a9:03:
71:af:f4:6e:f8:b2:e8:19:16:56:e8:42:ab:02:f8:
74:70:93:4a:ac:9c:d3:5f:47:bb:1b:aa:ca:80:5e:
db:5b:ad:37:d3:98:bf:41:e8:ae:50:de:03:c8:87:
d8:4b:aa:2c:9f:ae:b9:7d:b1:35:05:be:40:9e:bd:
5a:a5:0c:0d:1e:f4:e3:00:2a:c5:61:12:2c:9c:ca:
08:f4:50:b1:aa:e8:18:24:30:14:63:de:1a:59:1f:
5d:fb:a0:e9:cc:83:d5:78:a0:50:8f:0a:3d:39:64:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:80:06:91:FF:72:FF:E3:E8:92:50:C8:AE:90:C6:A1:13:72:9A
X509v3 Authority Key Identifier:
keyid:9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e2:36:54:2c:17:61:88:a4:40:f3:a8:71:8f:4e:12:c7:da:
bb:09:10:1e:2d:a7:20:2f:ec:d4:10:55:8e:fb:74:56:c4:ac:
da:ae:ad:40:e3:46:9c:f6:38:da:00:bf:e2:68:cd:fc:3c:ba:
c7:03:a8:f8:a1:c1:70:31:d0:ce:02:a1:b3:0b:7a:2a:95:fd:
2c:76:87:62:f2:4e:e3:35:5b:5a:77:2d:3f:3d:06:cf:91:37:
04:f9:e9:23:b9:8c:e1:17:b2:b5:f1:e3:67:16:8d:47:50:a3:
97:61:e4:31:26:dd:1d:17:fd:b8:f1:bc:cd:a0:2e:41:0f:ad:
b6:74:55:d0:6a:fb:bf:56:44:32:2e:6a:28:50:45:7e:ac:26:
90:14:bc:58:9d:83:9b:e6:13:97:79:a6:c6:30:1d:fd:fb:95:
1a:7b:a0:d5:55:98:d8:a7:fc:3b:9e:93:f8:2c:df:37:18:0d:
9f:c4:45:eb:2b:1b:05:8d:01:f7:18:3e:f9:0c:ed:cb:fb:ec:
e5:2b:63:3c:1b:f6:c5:f7:4b:61:4f:0d:80:4b:3b:8c:72:6d:
82:dc:c7:79:bc:4f:99:5a:2d:d1:af:e9:02:6d:e0:ef:b9:91:
54:c7:da:eb:c6:20:94:12:81:eb:62:ee:b6:54:c8:ef:f8:ea:
56:a0:e4:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpyQyU2i2M/yI+yjFE/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTVjMzNjOGIwMjA0YzQ0MGMwZjk3OGVhNTg1MjA4MDFl
MmM1YzcwHhcNMjYwMzI1MjMwMDQ1WhcNMjYwMzI2MjMwMDQ1WjAzMTEwLwYDVQQD
Eyg2MjY4ODAwNjkxZmY3MmZmZTNlODkyNTBjOGFlOTBjNmExMTM3MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzMYSHyti2nc052k2UQ0jg7eOFgV
XBg9wW5I0Tz4GPgNJ+zVHjvp5t47r/VKj90IlvgxjoyQqy68aKZS/K40bjht/num
xosoVQWkARFk+jVkIRQUhfNYrS6xIHruNlMD1wzWRFLfC3Zx58w4/GZH1zD2MX71
G4F68gmdu9Fp3CYRbRs40Os7hdtHa22IHxBb3tcGqQNxr/Ru+LLoGRZW6EKrAvh0
cJNKrJzTX0e7G6rKgF7bW60305i/QeiuUN4DyIfYS6osn665fbE1Bb5Anr1apQwN
HvTjACrFYRIsnMoI9FCxqugYJDAUY94aWR9d+6DpzIPVeKBQjwo9OWTtSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJogAaR/3L/4+iSUMiukMahE3KaMB8GA1UdIwQY
MBaAFJ1VwzyLAgTEQMD5eOpYUggB4sXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEt
YzNhYjg3NzM4ZmU3LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEtYzNhYjg3NzM4ZmU3
LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOI2VCwX
YYikQPOocY9OEsfauwkQHi2nIC/s1BBVjvt0VsSs2q6tQONGnPY42gC/4mjN/Dy6
xwOo+KHBcDHQzgKhswt6KpX9LHaHYvJO4zVbWnctPz0Gz5E3BPnpI7mM4ReytfHj
ZxaNR1Cjl2HkMSbdHRf9uPG8zaAuQQ+ttnRV0Gr7v1ZEMi5qKFBFfqwmkBS8WJ2D
m+YTl3mmxjAd/fuVGnug1VWY2Kf8O56T+CzfNxgNn8RF6ysbBY0B9xg++Qzty/vs
5StjPBv2xfdLYU8NgEs7jHJtgtzHebxPmVot0a/pAm3g77mRVMfa68YglBKB62Lu
tlTI7/jqVqDkBA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:58 2026 by rpki-client